iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It results in heap buffer overflow in `CIccTagLut16::Validate()`. Version 2.3.1.2 contains a patch. No known workarounds are available.
References
Configurations
History
12 Jan 2026, 18:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/InternationalColorConsortium/iccDEV/commit/7c2cb719a9de1c00844e457e070d657314383ee3 - Patch | |
| References | () https://github.com/InternationalColorConsortium/iccDEV/commit/e91fe722ac54ce497d410153e7405090e0565d7b - Patch | |
| References | () https://github.com/InternationalColorConsortium/iccDEV/issues/397 - Issue Tracking, Exploit, Vendor Advisory | |
| References | () https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-9q9c-699q-xr2q - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:* | |
| First Time |
Color
Color iccdev |
06 Jan 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-06 19:16
Updated : 2026-01-12 18:28
NVD link : CVE-2026-21490
Mitre link : CVE-2026-21490
CVE.ORG link : CVE-2026-21490
JSON object : View
Products Affected
color
- iccdev